Linus Rath eb7b6f8dab fix: point Stalwart installs at a tagged Lite release and publish checksums ...

The Stalwart bundle's README told admins to use
`releases/latest/download/bulwark-lite-stalwart.zip` as `resourceUrl`.
Stalwart re-downloads that URL on its own schedule and checks no hash or
signature, so whatever the newest release held would run as script on
the Stalwart origin next to the web admin.

The README now installs from the tagged release, explains updating by
moving `resourceUrl` to the next tag, and describes the floating URL as
an opt-in with that risk spelled out. Release runs upload a `.sha256`
next to each Lite zip.

2026-09-26 17:30:47 +02:00

..

workflows

fix: point Stalwart installs at a tagged Lite release and publish checksums

2026-09-26 17:30:47 +02:00

FUNDING.yml

Add funding configuration for Bulwark Webmail

2026-04-02 00:37:58 +02:00